cve-2024-40939
Vulnerability from cvelistv5
Published
2024-07-12 12:25
Modified
2024-12-19 09:08
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipc_devlink_create_region(), previously created regions delete process starts from tainted pointer which actually holds error code value. Fix this bug by decreasing region index before delete. Found by Linux Verification Center (linuxtesting.org) with SVACE.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/040d9384870386eb5dc55472ac573ac7756b2050
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/37a438704d19bdbe246d51d3749b6b3a8fe65afd
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b0c9a26435413b81799047a7be53255640432547
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/fe394d59cdae81389dbf995e87c83c1acd120597
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/040d9384870386eb5dc55472ac573ac7756b2050
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/37a438704d19bdbe246d51d3749b6b3a8fe65afd
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/b0c9a26435413b81799047a7be53255640432547
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/fe394d59cdae81389dbf995e87c83c1acd120597
Impacted products
Vendor Product Version
Linux Linux Version: 5.16
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T04:39:55.776Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/fe394d59cdae81389dbf995e87c83c1acd120597"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/040d9384870386eb5dc55472ac573ac7756b2050"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/37a438704d19bdbe246d51d3749b6b3a8fe65afd"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b0c9a26435413b81799047a7be53255640432547"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-40939",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T17:04:33.559080Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:34:26.102Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wwan/iosm/iosm_ipc_devlink.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "fe394d59cdae81389dbf995e87c83c1acd120597",
              "status": "affected",
              "version": "4dcd183fbd67b105decc8be262311937730ccdbf",
              "versionType": "git"
            },
            {
              "lessThan": "040d9384870386eb5dc55472ac573ac7756b2050",
              "status": "affected",
              "version": "4dcd183fbd67b105decc8be262311937730ccdbf",
              "versionType": "git"
            },
            {
              "lessThan": "37a438704d19bdbe246d51d3749b6b3a8fe65afd",
              "status": "affected",
              "version": "4dcd183fbd67b105decc8be262311937730ccdbf",
              "versionType": "git"
            },
            {
              "lessThan": "b0c9a26435413b81799047a7be53255640432547",
              "status": "affected",
              "version": "4dcd183fbd67b105decc8be262311937730ccdbf",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wwan/iosm/iosm_ipc_devlink.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.16"
            },
            {
              "lessThan": "5.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.95",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.35",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.9.*",
              "status": "unaffected",
              "version": "6.9.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.10",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: wwan: iosm: Fix tainted pointer delete is case of region creation fail\n\nIn case of region creation fail in ipc_devlink_create_region(), previously\ncreated regions delete process starts from tainted pointer which actually\nholds error code value.\nFix this bug by decreasing region index before delete.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-19T09:08:34.994Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/fe394d59cdae81389dbf995e87c83c1acd120597"
        },
        {
          "url": "https://git.kernel.org/stable/c/040d9384870386eb5dc55472ac573ac7756b2050"
        },
        {
          "url": "https://git.kernel.org/stable/c/37a438704d19bdbe246d51d3749b6b3a8fe65afd"
        },
        {
          "url": "https://git.kernel.org/stable/c/b0c9a26435413b81799047a7be53255640432547"
        }
      ],
      "title": "net: wwan: iosm: Fix tainted pointer delete is case of region creation fail",
      "x_generator": {
        "engine": "bippy-5f407fcff5a0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-40939",
    "datePublished": "2024-07-12T12:25:15.148Z",
    "dateReserved": "2024-07-12T12:17:45.586Z",
    "dateUpdated": "2024-12-19T09:08:34.994Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-40939\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-07-12T13:15:16.320\",\"lastModified\":\"2024-11-21T09:31:54.730\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: wwan: iosm: Fix tainted pointer delete is case of region creation fail\\n\\nIn case of region creation fail in ipc_devlink_create_region(), previously\\ncreated regions delete process starts from tainted pointer which actually\\nholds error code value.\\nFix this bug by decreasing region index before delete.\\n\\nFound by Linux Verification Center (linuxtesting.org) with SVACE.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: wwan: iosm: corregir la eliminaci\u00f3n del puntero contaminado es un caso de error en la creaci\u00f3n de la regi\u00f3n. En caso de que falle la creaci\u00f3n de la regi\u00f3n en ipc_devlink_create_region(), el proceso de eliminaci\u00f3n de regiones creadas previamente comienza desde el puntero contaminado que en realidad contiene el valor del c\u00f3digo de error. Corrija este error disminuyendo el \u00edndice de regi\u00f3n antes de eliminarlo. Encontrado por el Centro de verificaci\u00f3n de Linux (linuxtesting.org) con SVACE.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/040d9384870386eb5dc55472ac573ac7756b2050\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/37a438704d19bdbe246d51d3749b6b3a8fe65afd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/b0c9a26435413b81799047a7be53255640432547\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/fe394d59cdae81389dbf995e87c83c1acd120597\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/040d9384870386eb5dc55472ac573ac7756b2050\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/37a438704d19bdbe246d51d3749b6b3a8fe65afd\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/b0c9a26435413b81799047a7be53255640432547\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/fe394d59cdae81389dbf995e87c83c1acd120597\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.